References https://seclists.org/fulldisclosure/2024/Mar/14 https://wiki.articatech.com/maintenance/security/CVE-2024-2056 https://sploitus.com/exploit?id=PACKETSTORM:177484 https://nvd.nist.gov/vuln/detail/CVE-2024-2056 https://cve.imfht.com/detail/CVE-2024-2056 https://cloud.tencent.com/developer/article/2400137 https://wiki.articatech.com/proxy-service
Related VulnerabilitiesPoCCVE-2026-23693: ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp ProxyPoCCVE-2026-20896: Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication BypassPoCCVE-2025-26399: SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCELobeChat /webapi/proxy 服务器端请求伪造漏洞(CVE-2026-54157)东胜物流软件 /PriceCarrier/CrmProxyMailListHtmlGridSource.aspx SQL 注入漏洞关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告Apache Druid /proxy/coordinator@ 服务器端请求伪造漏洞(CVE-2025-27888)Gradio /proxy 服务器端请求伪造漏洞(CVE-2023-34239)PoCCVE-2025-62168: Squid Proxy - HTTP Authentication Credentials DisclosurePoClitellm-unauth-model-exposure: LiteLLM Proxy - Model ExposureArtica Proxy /images.listener.php 文件读取漏洞(CVE-2024-2053)PoCNginx Proxy Manager /api/tokens 默认口令漏洞PoCCVE-2025-62126: WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure